AWS BatchでEKSコンピューティング環境を作成する際の詰まったところ

# コンピューティング環境作成前はサービスにリンクされたロールは存在しない
bash-5.2$ aws iam get-role --role-name AWSServiceRoleForBatch

An error occurred (NoSuchEntity) when calling the GetRole operation: The role with name AWSServiceRoleForBatch cannot be found.
# コンピューティング環境を作成する
bash-5.2$ cat <<EOF > ./batch-eks-compute-environment.json
{
  "computeEnvironmentName": "My-Eks-CE1",
  "type": "MANAGED",
  "state": "ENABLED",
  "eksConfiguration": {
＜中略＞
  }
}
EOF
aws batch create-compute-environment --cli-input-json file://./batch-eks-compute-environment.json
{
    "computeEnvironmentName": "My-Eks-CE1",
    "computeEnvironmentArn": "arn:aws:batch:ap-northeast-1:******:compute-environment/My-Eks-CE1"
}
# コンピューティング環境作成したタイミングでサービスにリンクされたロールが自動で作成
bash-5.2$ aws iam get-role --role-name AWSServiceRoleForBatch
{
    "Role": {
        "Path": "/aws-service-role/batch.amazonaws.com/",
        "RoleName": "AWSServiceRoleForBatch",
＜中略＞
        "CreateDate": "2025-02-25T06:25:25+00:00",
        "AssumeRolePolicyDocument": {
            "Version": "2012-10-17",
            "Statement": [
                {
                    "Effect": "Allow",
                    "Principal": {
                        "Service": "batch.amazonaws.com"
                    },
                    "Action": "sts:AssumeRole"
                }
            ]
        },
        "MaxSessionDuration": 3600,
        "RoleLastUsed": {}
    }
}

# aws-authは存在しない
bash-5.2$  kubectl get --all-namespaces configmaps
NAMESPACE                NAME                                                   DATA   AGE
default                  kube-root-ca.crt                                       1      43m
kube-node-lease          kube-root-ca.crt                                       1      43m
kube-public              kube-root-ca.crt                                       1      43m
kube-system              extension-apiserver-authentication                     6      43m
kube-system              kube-apiserver-legacy-service-account-token-tracking   1      43m
kube-system              kube-root-ca.crt                                       1      43m
my-aws-batch-namespace   kube-root-ca.crt                                       1      54s
# eksctl create iamidentitymappingでサービスにリンクされたロールとKubernetes ロールのマッピングを行う
bash-5.2$ eksctl create iamidentitymapping \
    --cluster test2 \
    --arn "arn:aws:iam::******:role/AWSServiceRoleForBatch" \
    --username aws-batch
2025-02-25 15:10:55 [ℹ]  checking arn arn:aws:iam::******:role/AWSServiceRoleForBatch against entries in the auth ConfigMap
2025-02-25 15:10:55 [ℹ]  adding identity "arn:aws:iam::******:role/AWSServiceRoleForBatch" to auth ConfigMap
# aws-authが作成されている
bash-5.2$  kubectl get --all-namespaces configmaps
NAMESPACE                NAME                                                   DATA   AGE
default                  kube-root-ca.crt                                       1      44m
kube-node-lease          kube-root-ca.crt                                       1      44m
kube-public              kube-root-ca.crt                                       1      44m
kube-system              aws-auth                                               2      15s
kube-system              extension-apiserver-authentication                     6      44m
kube-system              kube-apiserver-legacy-service-account-token-tracking   1      44m
kube-system              kube-root-ca.crt                                       1      44m
my-aws-batch-namespace   kube-root-ca.crt                                       1      116s